VULNERABILITY INTELLIGENCE

CVE-2018-9859

CVSS score8.1 HIGH
EPSS probability0.92%
CISA KEVNot currently listed
Published2018-06-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications.

Primary references